IN THE CLAIMS 

Please amend the claims as follows: 

1. (Currently Amended) An apparatus comprising: 

a. a user terminal containing a client application which 
generates a service request; 

b. a service application which is located in a computer 
other than said user terminal responsively coupled to 
said client application which responds to said service 
application; 

c. a communication class library which regulates 
communications between said client application and said 
service application; 

d. a security facility embedded within said communication 
class library; and 

e. wherein said security facility is automatically 
activated by said service request. 

2. (Original) The apparatus of claim 1 wherein said 
security facility further comprises an encryption object. 

3. (Original) The apparatus of claim 2 wherein said 
security facility further comprises security support provider 
interface . 



3 



4. (Original) The apparatus of claim 3 wherein said 
security facility further comprises a decryption object. 

5. (Currently Amended) The apparatus of claim 4 further 
comprising a wherein said user terminal is responsively 
coupled to a data base management system via a publically 
accessible digital data communication network and wherein 
said client application is located within said user terminal 
and said service application is located within said data base 
management system. 

6. (Currently Amended) A method of handling a service 
request from a client application to a service application, 
comprising: 

a. embedding a security facility within a communication 
class library; 

b. generating a service request within a user terminal using 
said client application; 

c. transferring said service request from said client 
application to said service application located within a 
computer which is different from said user terminal ; 

d. receiving said service request by said service 
application; 
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e. honoring said service request by said service 
application; and 

f. automatically implementing security functions from said 
embedded security facility during said step which honors 
said service request. 

7. (Original) A method according to claim 6 further comprising 
a context token transferred from said client to said service 
application identifying required security functions from said 
embedded security facility. 

8. (Original) A method according to claim 7 wherein said 
transferring step further comprises transferring said service 
request to said service application via a publically accessible 
digital data communication network. 

9. (Currently Amended) A method according to claim 8 further 
comprising a user terminal wherein said client application is 
located within said user terminal. 

10. (Original) A method according to claim 9 further comprising 
a data base management system wherein said service application is 
located within said data base management system. 
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11. (Original) An apparatus comprising: 

a. means for generating a service request requiring security 
functions; 

b. means responsively coupled to said generating means for 
honoring said service request while providing said security 
functions; and 

c. means responsively coupled to said honoring means for 
embedding a security facility within a communication class 
library which provides said security functions. 

12. (Original) An apparatus according to claim 11 further 
comprising means for uniquely identifying said security functions 
via a context token. 

13. (Original) An apparatus according to claim 12 wherein said 
context token is transferred to said honoring means from said 
generating means in association with said service request. 

14. (Original) An apparatus according to claim 13 wherein said 
honoring means further comprises a data base management system. 

15. (Original) An apparatus according to claim 14 wherein said 
generating means further comprises a user terminal. 
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16. (Currently Amended) In a data processing system having a 
client application and a user terminal which generates a service 
request requiring security activity responsively coupled to a 
service application, the improvement comprising: 

a. a security facility embedded within a communication 
class library responsively coupled to said service application; 
and 

b. a context token which specifies said security activity 
to said security f aciltiy facility . 

17. (Original) The improvement according to claim 16 wherein 
said context token is transferred from said client application to 
said service application along with said service request. 

18. (Currently Amended) The improvement according to claim 17 
further comprising a wherein said user terminal containing 
contains said client application. 

19. (Original) The improvement according to claim 18 further 
comprising a publically accessible digital data communication 
network responsively coupled between said user terminal and said 
service application. 
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20. (Original) The improvement according to claim 19 further 
comprising a data base management system containing said service 
application. 

21. (Original) An apparatus comprising: 

a. a user terminal which has a client application which 
generates a service request; 

b. an enterprise data base management system having a 
service application responsively coupled to said client 
application via a publically accessible digital data 
communication network which responds to said service 
request; 

c. a communication class library which regulates 
communication between said client application and said 
service application; 

d. a security facility embedded within said communication 
class library; and 

e. wherein said security facility has an encryption object 
and has a decryption object and has a security support 
provider interface and wherein said security facility is 
automatically activated by sad service request. 



8 



